CVE-2020-7513

HIGH

7.5

Description

A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to intercept traffic and read configuration data.

Details CVE

Score CVSS v3.17.5

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie6/16/2020

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

schneider-electric:easergy_t300schneider-electric:easergy_t300_firmware

Faiblesses (CWE)

CWE-312CWE-312

References

https://www.se.com/ww/en/download/document/SEVD-2020-161-04(cybersecurity@se.com)

https://www.se.com/ww/en/download/document/SEVD-2020-161-04(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.